Privacy Policy

Muse Foods (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website [yourwebsite.com] or use our services.

Privacy Policy

Muse Food Services Private Limited (trading as Muse Foods)

CIN: [Insert CIN] | Udyam Registration No.: UDYAM-KR-03-0530678

Registered Office: Ashraya Layout, Garudachar Palya, Mahadevapura, Bengaluru, Karnataka 560048

Website: https://www.musefoods.in | Email: sales@musefoods.in | Phone: +91 97380 67237 | +91 97420 07711

Last updated: 17 October 2026

1. About This Policy

Muse Food Services Private Limited ("Muse", "we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use, share, store and protect it, and the rights you have.

This Policy applies to personal data processed through our Website (https://www.musefoods.in), our catering, hospitality, staffing and event services, and our communications with customers, clients, suppliers and job applicants.

We are the Data Fiduciary (and, where the GDPR applies, the Controller) for the personal data described in this Policy.

This Policy is prepared in line with:

• Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 ("DPDP Law")

• Information Technology Act, 2000 and rules made under it, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable

• Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020

• Telecom Commercial Communications Customer Preference Regulations, 2018 (TRAI)

• EU General Data Protection Regulation and UK GDPR, where they apply to individuals in those regions

2. Personal Data We Collect

2.1 Data you give us

• Enquiry and consultation forms: when you use the "Let's Discuss Your Requirements" form or book a discovery call, we collect your full name, company name, work email, phone number (optional) and your message.

• Newsletter sign-up: your email address, to send you updates if you subscribe.

• Identity and contact data: name, email address, phone number, billing and delivery address, company name and designation.

• Booking and order data: event date, venue, guest count, menu selections, special instructions and order history.

• Dietary and allergy information: dietary preferences or food allergies you choose to tell us so we can serve food safely. We collect this only with your consent and only for that purpose.

• Payment data: transaction reference and payment status. Card, UPI and bank details are processed directly by our payment gateway partners. We do not store full card numbers or CVVs.

• Communications: enquiries, feedback, complaints and support correspondence.

• Job applications: CV, qualifications, work history and contact details.

• Supplier and partner data: contact details of supplier and client representatives.

2.2 Data collected automatically

• Usage and device data: IP address, browser type and version, device type, operating system, pages visited, time and date of visit, time spent on pages and diagnostic data.

• Cookies and similar technologies: see Section 6.

2.3 Data from third parties

• Google Places and mapping services, to look up and validate addresses and locations.

• Referrals from clients, event planners or partners.

2.4 CCTV

Our kitchens and premises may be monitored by CCTV for food safety, security and staff safety. Signage is displayed where CCTV is in use.

3. How and Why We Use Your Data

• Respond to enquiries and issue quotations: Data used: Identity, contact, booking. Legal basis (India: DPDP Law): Consent / your voluntary provision for the purpose. Legal basis (GDPR, where applicable): Steps prior to contract.

• Deliver catering and event services: Data used: Identity, contact, booking, dietary/allergy. Legal basis (India: DPDP Law): Consent / voluntary provision. Legal basis (GDPR, where applicable): Contract; explicit consent for allergy data.

• Process payments and issue invoices: Data used: Identity, contact, payment status. Legal basis (India: DPDP Law): Voluntary provision; legal obligation. Legal basis (GDPR, where applicable): Contract; legal obligation.

• Customer support and complaints: Data used: Identity, contact, communications. Legal basis (India: DPDP Law): Voluntary provision; legal obligation. Legal basis (GDPR, where applicable): Contract; legitimate interests.

• Website operation, security and fraud prevention: Data used: Usage, device, cookies. Legal basis (India: DPDP Law): Legitimate use for security; legal obligation. Legal basis (GDPR, where applicable): Legitimate interests.

• Analytics and service improvement: Data used: Usage, device, non-essential cookies. Legal basis (India: DPDP Law): Consent. Legal basis (GDPR, where applicable): Consent.

• Marketing (email, SMS, WhatsApp): Data used: Identity, contact. Legal basis (India: DPDP Law): Consent. Legal basis (GDPR, where applicable): Consent.

• Recruitment: Data used: Application data. Legal basis (India: DPDP Law): Consent / voluntary provision. Legal basis (GDPR, where applicable): Steps prior to contract; legitimate interests.

• Legal and regulatory compliance (tax, FSSAI, law enforcement): Data used: As required. Legal basis (India: DPDP Law): Legal obligation. Legal basis (GDPR, where applicable): Legal obligation.

We collect only the personal data necessary for these purposes and do not use it for unrelated purposes without telling you and, where required, obtaining your consent.

4. Consent and Your Choices

4.1 Where we rely on consent, we will ask for it through a clear notice. Consent is free, specific, informed and unambiguous.

4.2 You may withdraw consent at any time, as easily as you gave it, by writing to [privacy@musefoods.in], using the unsubscribe link in our emails, or using our cookie settings. Withdrawal does not affect processing already carried out, but we may be unable to provide some Services afterwards.

4.3 Where applicable, you may also manage your consent through a Consent Manager registered with the Data Protection Board of India.

4.4 This notice is available in English. On request, we will make it available in any language listed in the Eighth Schedule to the Constitution of India.

5. Marketing Communications

5.1 We send promotional messages only with your consent.

5.2 SMS and voice communications comply with TRAI regulations, including registration on the Distributed Ledger Technology (DLT) platform and respect for National Customer Preference Register (DND) choices.

5.3 You can opt out at any time by clicking "unsubscribe" in emails, replying with the opt-out keyword specified in the message, or emailing [privacy@musefoods.in].

5.4 Transactional and service messages (for example, booking confirmations, delivery updates and one-time passwords) are sent as needed to provide the Services.

5.5 We do not sell or share your mobile number or consent records with third parties for their own marketing.

6. Cookies

We use cookies and similar technologies as follows:

• Strictly necessary: Purpose: Website functionality, security and fraud prevention. Duration: Session. Consent required: No.

• Consent preference: Purpose: Record your cookie choices. Duration: Up to 12 months. Consent required: No.

• Functionality: Purpose: Remember preferences such as language and login. Duration: Up to 12 months. Consent required: Yes.

• Analytics: Purpose: Understand how visitors use the Website. Duration: Up to [24] months. Consent required: Yes.

• Marketing: Purpose: Measure and personalise advertising. Duration: Up to [13] months. Consent required: Yes.

Non-essential cookies are set only with your consent. You can change your choices through our cookie settings or browser settings.

7. Sharing Your Personal Data

We share personal data only as needed and under contractual obligations of confidentiality and security, with:

• Service providers (Data Processors): Framer (website hosting and form submissions), Google (Places/Maps and workspace email), email newsletter and messaging providers, analytics providers, cloud storage, payment gateways where applicable, delivery and logistics partners, and IT support.

• Corporate clients: where Muse runs dining operations at a client workplace, limited data (such as staff names and roles deployed on site) may be shared with that client for site access and security.

• Event partners: venue managers or event planners, only as needed to deliver your Event.

• Professional advisers: auditors, lawyers and insurers.

• Authorities: government, regulatory, tax, FSSAI or law enforcement authorities, where required by law or lawful request.

• Business transfers: a buyer or successor in a merger, acquisition or restructuring, subject to equivalent protections and notice to you.

We do not sell your personal data.

8. International Transfers

Some service providers, including our website host Framer, may process data outside India. We transfer personal data outside India only as permitted under the DPDP Law and any restrictions notified by the Government of India. For individuals in the EU or UK, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

9. Data Retention

We keep personal data only as long as necessary for the purpose for which it was collected, or as required by law, and then securely delete or anonymise it.

• Enquiries that do not convert: Up to 12 months

• Booking, event and customer records: Duration of engagement plus up to 3 years

• Dietary and allergy information: Deleted within 30 days after the Event, unless needed for an open complaint

• Invoices and accounting records: 8 years, as required under the Companies Act, 2013 and GST law

• Support tickets and complaints: Up to 24 months from closure

• Marketing preferences: Until consent is withdrawn

• Website logs and traffic data: Minimum 1 year, as required under the DPDP Rules, and up to 24 months

• Analytics data: Up to 24 months

• CCTV footage: Up to [30] days, unless required for an investigation

• Job applications: Up to 12 months after the recruitment decision

Where data has been inactive for a prolonged period and the purpose is no longer served, we will notify you before erasure where the law requires it. Residual copies in encrypted backups are deleted on the routine backup cycle.

10. Security

We implement reasonable security safeguards to protect personal data, including encryption in transit, access controls on a need-to-know basis, secure hosting, logging and monitoring, vendor security obligations, and staff confidentiality and training. No method of internet transmission or storage is completely secure, but we work continuously to protect your data.

11. Personal Data Breach

If a personal data breach occurs, we will act promptly to contain it and will notify the Data Protection Board of India and affected individuals as required under the DPDP Law, and other authorities (such as CERT-In) where applicable.

12. Your Rights

Subject to applicable law, you have the right to:

• Access a summary of your personal data and the processing activities.

• Correct, complete or update inaccurate or incomplete data.

• Erase data that is no longer needed, unless we must keep it by law.

• Withdraw consent at any time.

• Nominate another person to exercise your rights in case of death or incapacity.

• Grievance redressal through our Grievance Officer.

If the GDPR applies to you, you also have the right to data portability, to restrict processing, to object to processing based on legitimate interests or for direct marketing, and to lodge a complaint with your local supervisory authority.

To exercise your rights, email [privacy@musefoods.in]. We may need to verify your identity before acting on a request.

13. Children's Personal Data

Our Services are not directed at children. Under the DPDP Law, a child is anyone under 18 years of age. We do not knowingly collect personal data of children without verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has provided us data without such consent, contact us and we will delete it.

14. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their privacy policies.

15. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified by email and/or a prominent notice on the Website before they take effect, and the "Last updated" date will be revised.

16. Grievance Officer and Contact

For questions, requests or complaints about your personal data:

Grievance Officer

• Name: [Name]

• Designation: [Designation]

• Email: [privacy@musefoods.in]

• Phone: [Number]

• Address: Muse Food Services Private Limited, Ashraya Layout, Garudachar Palya, Mahadevapura, Bengaluru, Karnataka 560048

We acknowledge grievances within 48 hours and resolve them within 30 days. Our team is available 10:00 to 22:30, all days of the week.

If you are not satisfied with our response, you may approach the Data Protection Board of India after exhausting our grievance redressal process.

Contact Us

Muse Food Services Private Limited (Muse Foods)

Ashraya Layout, Garudachar Palya, Mahadevapura, Bengaluru, Karnataka 560048

Sales & General Enquiries

Phone: +91 97380 67237 | Email: sales@musefoods.in

Chandrashekhar Gorabal, Director, Food & Beverage

Phone: +91 97380 67237 | Email: sales@musefoods.in

Joby Thomas, Director, Food & Beverage

Phone: +91 97420 07711 | Email: jobythomas@musefoods.in

Website: https://www.musefoods.in/contact

Hours: 10:00 to 22:30, all days of the week